$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: GjKb+ZXQ8w0cBaKL2pEV42CUb8BrjGat1MRkuKRVDW4= Subject key identifier: FB:27:D7:5D:85:3B:44:69:86:D5:66:EB:B2:4B:C9:D7:DC:A3:B9:AA Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: E0 Signing time: Sun 05 Apr 2026 06:06:26 +0000 Manifest this update: Sun 05 Apr 2026 06:06:26 +0000 Manifest next update: Sun 12 Apr 2026 06:06:26 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: yI2s6GGfmN6kINadAzeZqj+ocRv5vGBNjYupyO43CZI=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Apr 5 06:06:26 2026 GMT Not After : Apr 12 06:06:26 2026 GMT Subject: CN=69d1fbe2-ac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:2d:af:7a:3a:02:82:9e:62:74:42:a5:4d: 94:89:15:12:4a:96:bd:8d:3d:16:01:0b:d5:ba:f6: c8:5d:ee:6e:b7:14:f5:0d:74:23:2f:56:20:ed:97: 9a:6b:4c:70:bd:3a:25:be:f5:e5:5c:37:fa:d7:5a: 3e:97:99:67:8a:58:35:df:e1:ca:ec:b8:7c:96:ab: b6:c7:dd:6d:37:a0:24:49:2d:14:62:6c:32:9f:fc: 0f:24:37:01:5e:e9:f2:dd:6e:9c:bc:47:e3:3a:6b: 9c:f4:19:a8:61:d5:c9:5f:9c:f0:e4:2e:63:44:68: e8:46:62:2f:64:02:50:51:04:14:0d:20:b8:6e:5b: 47:98:5a:bd:4d:b8:18:71:99:54:86:24:9a:07:9c: f4:09:64:b4:6e:24:38:f5:c8:b3:e6:4a:93:21:6e: f0:d0:4b:43:2e:e3:4d:ee:0d:12:08:7b:e4:d8:df: 8b:36:dd:84:79:1f:3f:67:c7:04:ae:21:f8:55:79: 41:f6:f0:89:84:56:6e:fa:2c:45:09:c8:d7:7d:32: 7f:20:58:2e:f3:65:04:41:00:ad:d5:c5:f2:69:ec: d7:25:7e:1d:56:e5:45:ff:c0:6f:66:f8:29:75:42: 8c:3d:67:33:fb:0f:08:2d:c0:c4:c5:f4:b8:9e:bd: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:27:D7:5D:85:3B:44:69:86:D5:66:EB:B2:4B:C9:D7:DC:A3:B9:AA X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:92:a9:24:84:26:5a:a7:eb:b2:5d:12:2e:8a:c0:8d:7b:c7: c5:16:8d:57:00:df:90:ec:70:c6:88:d9:42:a4:d9:7b:7d:40: 30:d5:da:6a:11:fb:7f:76:cb:ce:82:2e:7c:95:59:92:6c:c5: 31:14:4b:04:4e:4a:2b:8b:d8:46:57:4b:ae:3a:58:05:58:7f: 4b:f2:39:51:95:ca:dc:52:d3:d8:59:41:c7:e7:88:d9:7c:49: 24:ce:7c:cf:12:cd:3c:8c:90:47:7b:31:a9:12:c9:28:d5:be: 3d:f0:27:9d:2c:42:05:9a:7e:d3:57:34:a0:fc:95:b4:55:68: 9e:d4:0d:9a:c3:4d:c7:78:6a:b8:8c:96:d8:a8:41:01:f0:60: 83:ca:1d:85:b9:b4:29:2d:01:1b:1d:79:fb:a1:f9:1f:20:6f: f1:a2:a7:c0:92:ca:c3:75:a4:e8:6c:9e:01:bc:ba:92:04:7e: 8c:d1:6d:79:43:32:3a:6d:40:52:60:bc:8d:f4:02:31:1a:ee: 0c:f9:7a:c9:4e:36:21:01:d0:1c:6b:88:14:77:85:e2:ad:b9: 6e:7a:43:3b:d1:b7:0e:80:fe:0c:86:e5:78:74:09:0e:49:71: ad:7d:1b:2b:20:5d:12:4b:ee:7b:a8:97:27:e9:cc:14:21:58: ff:17:cf:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjYwNDA1MDYwNjI2WhcNMjYwNDEyMDYwNjI2WjAYMRYwFAYD VQQDEw02OWQxZmJlMi1hYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF4tr3o6AoKeYnRCpU2UiRUSSpa9jT0WAQvVuvbIXe5utxT1DXQjL1Yg7Zea a0xwvTolvvXlXDf611o+l5lnilg13+HK7Lh8lqu2x91tN6AkSS0UYmwyn/wPJDcB Xuny3W6cvEfjOmuc9BmoYdXJX5zw5C5jRGjoRmIvZAJQUQQUDSC4bltHmFq9TbgY cZlUhiSaB5z0CWS0biQ49ciz5kqTIW7w0EtDLuNN7g0SCHvk2N+LNt2EeR8/Z8cE riH4VXlB9vCJhFZu+ixFCcjXfTJ/IFgu82UEQQCt1cXyaezXJX4dVuVF/8BvZvgp dUKMPWcz+w8ILcDExfS4nr0gLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsn112F O0RphtVm67JLydfco7mqMB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy8zQUZDMzNFMkVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1 WTFjb2YtSlFtUngxU1JSVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJJKpJIQmWqfrsl0SLorAjXvHxRaNVwDfkOxwxojZQqTZe31AMNXaahH7f3bL zoIufJVZkmzFMRRLBE5KK4vYRldLrjpYBVh/S/I5UZXK3FLT2FlBx+eI2XxJJM58 zxLNPIyQR3sxqRLJKNW+PfAnnSxCBZp+01c0oPyVtFVontQNmsNNx3hquIyW2KhB AfBgg8odhbm0KS0BGx15+6H5HyBv8aKnwJLKw3Wk6GyeAby6kgR+jNFteUMyOm1A UmC8jfQCMRruDPl6yU42IQHQHGuIFHeF4q25bnpDO9G3DoD+DIbleHQJDklxrX0b KyBdEkvue6iXJ+nMFCFY/xfPxA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:39:56 2026 by rpki-client